hsi77 Privacy Policy

1.1  hsi77 ("hsi77", "we", "us", "our") operates the online betting and casino platform available at https://hsi77.app and all associated mobile or progressive web applications (collectively, the "Platform"). We are committed to protecting the privacy and personal data of every individual who accesses or uses the Platform.

1.2  This Privacy Policy ("Policy") describes how hsi77 collects, uses, processes, stores, and discloses personal data relating to users of the Platform ("you", "your", "Member"). It also describes the rights you hold with respect to that data and how you may exercise those rights.

1.3  This Policy applies to all personal data collected through: (a) your use of the Platform and any game products offered thereon, including sports betting, live casino, togel (Indonesia's traditional numbers lottery), slot games, and Live Dragon Tiger; (b) communications between you and hsi77's customer support team; (c) your participation in promotions, competitions, or surveys conducted by hsi77; and (d) any other interaction you have with hsi77 as a Platform user.

1.4  This Policy should be read in conjunction with hsi77's Terms & Conditions (available at /terms-conditions) and our Responsible Gaming Policy (available at /responsible-gaming), both of which are incorporated herein by reference.

1.5  This Policy does not apply to third-party websites, applications, or services that may be linked to or from the Platform. hsi77 is not responsible for the privacy practices of any third party, and we encourage you to review the privacy policies of any third-party service you access.

2.1  For the purposes of applicable data protection law, hsi77 is the data controller in respect of all personal data collected from Members through the Platform. As data controller, hsi77 determines the purposes for which and the means by which personal data is processed.

2.2  hsi77 operates under an international gaming licence and maintains its principal data-processing infrastructure in a jurisdiction with robust data-protection frameworks. Where hsi77 engages third-party data processors to assist in delivering Platform services, such processors act strictly on hsi77's documented instructions and are bound by data-processing agreements that impose obligations equivalent to those applicable to hsi77 itself.

2.3  If you have any questions about hsi77's role as data controller, or wish to exercise any of the rights described in Section 9 of this Policy, you may contact our Data Protection contact point at [email protected].

3.1  hsi77 collects personal data from you in three principal ways: (a) data you provide directly; (b) data collected automatically through your use of the Platform; and (c) data received from third parties.

3.1 Data You Provide Directly

When you register an account, complete KYC verification, make deposits or withdrawals, contact support, or participate in promotions, you may provide the following categories of personal data:

• Identity Data: Full legal name, date of birth, gender, and nationality as it appears on your Indonesian National Identity Card (KTP), passport, or driving licence (SIM).
• Contact Data: Email address, Indonesian mobile phone number, and residential address within Indonesia.
• Financial Data: Indonesian bank account details (BCA, BRI, BNI, Mandiri, CIMB Niaga, or OCBC NISP account number and account name) and/or e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, or LinkAja) used for deposits and withdrawals. Note: hsi77 does not store full payment card numbers.
• Verification Data: Copies of government-issued identity documents, proof of address documents, and any selfie or video footage submitted as part of the KYC process.
• Communications Data: The content of live chat transcripts, emails, or other messages exchanged with hsi77 support.
• Preference Data: Language preferences, promotional opt-in choices, and responsible-gaming settings (deposit limits, loss limits, session time limits, cooling-off periods, and self-exclusion requests).

3.2 Data Collected Automatically

When you access or use the Platform, hsi77 automatically collects certain technical and behavioural data:

• Device & Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and unique device identifiers.
• Usage Data: Pages visited, features used, game sessions played (including game type, stake amounts, and session duration), search queries within the Platform, and clickstream data.
• Location Data: Approximate geographic location derived from your IP address, used to enforce jurisdiction restrictions and display relevant content. hsi77 does not collect precise GPS location data.
• Session Data: Login timestamps, session duration, and logout events.
• Cookie Data: As described in Section 7 of this Policy.

3.3 Data Received from Third Parties

hsi77 may receive personal data from third parties in limited circumstances:

• Payment Processors: Transaction status confirmations from Indonesian banks and e-wallet providers (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja) confirming the success or failure of deposit and withdrawal requests.
• Identity Verification Services: Confirmation signals from third-party KYC or document-verification providers used to validate the authenticity of identity documents submitted by Members.
• Fraud & AML Screening: Risk signals from third-party anti-fraud and anti-money-laundering screening services, used to protect the integrity of the Platform and comply with applicable financial-crime-prevention obligations.
• Analytics Providers: Aggregated, de-identified performance data from third-party platform analytics tools.

4.1  hsi77 uses your personal data only for legitimate, clearly defined purposes. The table below summarises the primary processing activities, the data categories involved, and the legal basis for each (see Section 5 for a full explanation of legal bases):

4.2  hsi77 will not use your personal data for any purpose that is incompatible with those listed above without first obtaining your explicit consent or ensuring that another lawful basis applies.

4.3  hsi77 does not engage in automated decision-making that produces significant legal effects for Members — for example, we do not use fully automated profiling to approve or deny withdrawals or permanently close accounts without human review.

5.1  hsi77 processes your personal data only when a valid legal basis exists. The following legal bases apply to hsi77's processing activities:

• Contract Performance: Processing is necessary to enter into or perform our contract with you — namely, the Terms & Conditions governing your use of the Platform. This covers account creation, game delivery, and transaction processing.
• Legal Obligation: Processing is required to comply with applicable law, including anti-money-laundering (AML) regulations, Know Your Customer (KYC) obligations, and record-keeping requirements imposed by hsi77's international gaming licence.
• Legitimate Interests: Processing is necessary for hsi77's legitimate business interests, provided those interests are not overridden by your fundamental rights and freedoms. Legitimate interests include fraud prevention, platform security, responsible-gaming monitoring, and aggregate analytics. hsi77 has conducted legitimate-interest assessments for all processing activities relying on this basis.
• Consent: Where processing is not covered by the above bases — in particular, marketing communications and non-essential cookies — hsi77 relies on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5.2  Where hsi77 relies on legitimate interests as the legal basis for processing, you have the right to object to that processing. See Section 9 for how to exercise this right.

6.1  hsi77 does not sell, rent, or otherwise commercially exploit your personal data to third parties for their own marketing or commercial purposes. Personal data is shared only in the following strictly controlled circumstances:

6.1 Essential Service Providers

hsi77 shares personal data with third-party service providers who assist in delivering the Platform under binding data-processing agreements. These include:

• Payment Partners: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP) and e-wallet providers (OVO, DANA, GoPay, ShopeePay, LinkAja) — solely for processing deposit and withdrawal transactions.
• KYC & Identity Verification Providers: Third-party services used to validate identity documents and perform AML screening.
• Game Content Suppliers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Pocket Games Soft, and Spribe receive only the minimum session and stake data required to deliver their game products within the Platform.
• Cloud Infrastructure & Security Providers: Data hosting, content delivery, and cybersecurity service providers operating under strict confidentiality and security obligations.
• Analytics Providers: Aggregated, pseudonymised performance data only — no personally identifiable information is shared with analytics partners.

6.2 Legal & Regulatory Disclosure

hsi77 may disclose personal data to competent authorities, regulators, law-enforcement agencies, or courts where required to do so by law, court order, regulatory direction, or to defend hsi77's legal rights in litigation. hsi77 will notify affected Members of such disclosure requests where legally permitted to do so.

6.3 Business Transfers

In the event of a merger, acquisition, asset sale, or other business reorganisation involving hsi77, personal data held by hsi77 may be transferred to the acquiring or successor entity, subject to that entity agreeing to be bound by obligations no less protective than those in this Policy. hsi77 will notify affected Members prior to any such transfer taking effect.

7.1  hsi77 uses cookies and similar technologies (collectively, "cookies") on the Platform. Cookies are small text files placed on your device that allow us to recognise your browser, maintain your session, and remember certain preferences.

7.1 Types of Cookies Used by hsi77

7.2  hsi77 does not use advertising cookies, retargeting pixels, or any cross-site tracking technologies that follow you outside the hsi77 Platform.

7.3  You can control or delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will prevent you from logging in or using key Platform features. For guidance on managing cookies in popular browsers, visit the browser's official help documentation.

8.1  hsi77 retains personal data for no longer than is necessary to fulfil the purposes described in this Policy, or as required or permitted by applicable law. The following retention periods apply:

8.2  Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where anonymisation is applied, the resulting data set no longer constitutes personal data and may be retained indefinitely for aggregate analytics purposes.

8.3  Where hsi77 is required to retain data beyond the periods above due to an ongoing legal dispute, regulatory investigation, or audit, the relevant data will be preserved until the matter is fully resolved.

9.1  Subject to applicable law and certain conditions, you have the following rights with respect to your personal data held by hsi77:

• Right of Access: You may request a copy of the personal data hsi77 holds about you, including information on how it is used and with whom it is shared. hsi77 will respond within 30 calendar days.
• Right to Rectification: If any personal data held by hsi77 is inaccurate or incomplete, you may request that it be corrected. For data you can update yourself via Account Settings, we encourage you to do so directly.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data. This right is subject to hsi77's legal retention obligations (see Section 8); data that must be retained under AML law cannot be erased on request but will be restricted from any other use.
• Right to Restriction of Processing: You may ask hsi77 to restrict processing of your data in certain circumstances — for example, while the accuracy of data is being contested, or while an objection to processing is being assessed.
• Right to Data Portability: You may request that hsi77 provide your personal data in a structured, commonly used, machine-readable format (CSV or JSON) for the data categories that are processed on the basis of contract performance or consent.
• Right to Object: You may object at any time to processing based on legitimate interests (Section 5). hsi77 will cease such processing unless it can demonstrate compelling legitimate grounds that override your rights.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw consent at any time by updating your notification preferences in Account Settings or by contacting [email protected]. Withdrawal does not affect the lawfulness of processing before withdrawal.

9.2  To exercise any of the above rights, submit a written request to [email protected] with the subject line "Data Rights Request". hsi77 may need to verify your identity before processing the request. We aim to respond to all rights requests within 30 calendar days; complex or multiple requests may take up to 60 days, in which case we will notify you of the extension.

9.3  If you are not satisfied with hsi77's handling of your personal data or your rights request, you have the right to lodge a complaint with the relevant data protection authority in the jurisdiction in which hsi77's data-processing activities are registered.

10.1  hsi77 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, accidental loss, and destruction. Key security controls include:

• Encryption in Transit: All data transmitted between your device and hsi77 servers is encrypted using TLS 1.2 or higher (256-bit AES). Our domains enforce HTTPS via HSTS (HTTP Strict Transport Security).
• Encryption at Rest: Sensitive data fields — including identity document images, financial account details, and KYC verification results — are encrypted at rest using AES-256.
• Password Security: Member passwords are never stored in plain text. They are processed through an industry-standard, salted, one-way cryptographic hash function. hsi77 staff have no ability to retrieve your password.
• Access Controls: Access to production data systems is restricted on a strict need-to-know basis. All internal access is authenticated via multi-factor authentication and logged for audit purposes.
• Penetration Testing: hsi77 engages independent third-party security specialists to conduct regular penetration tests and vulnerability assessments of the Platform infrastructure.
• Incident Response: hsi77 maintains a documented data-breach response procedure. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, hsi77 will notify affected Members without undue delay.

10.2  While hsi77 takes all commercially reasonable precautions to protect your data, no internet-based system is completely secure. You are responsible for keeping your login credentials confidential and for notifying hsi77 immediately if you suspect unauthorised access to your Account.

11.1  As an internationally operated platform, hsi77 may transfer your personal data to servers and service providers located outside of Indonesia. Such transfers may occur in connection with cloud infrastructure hosting, KYC verification services, game content delivery, and security systems.

11.2  Where personal data is transferred to a jurisdiction that does not offer an equivalent level of data protection to the standards applicable in Indonesia, hsi77 will ensure that appropriate safeguards are in place. These safeguards may include:

• Standard contractual clauses approved by the relevant data protection authority, incorporated into our data-processing agreements with the receiving entity;
• Binding corporate rules where the recipient is an affiliate of hsi77; or
• Any other transfer mechanism recognised as providing adequate protection under applicable law.

11.3  By using the Platform, you acknowledge that your personal data may be processed and stored in jurisdictions outside Indonesia, subject to the safeguards described above. If you would like more information about the specific safeguards in place for any particular transfer, contact [email protected].

12.1  hsi77 is strictly an adults-only platform. Access to and use of the Platform is prohibited for any person under the age of 21. hsi77 does not knowingly collect, process, or retain personal data from individuals under 21.

12.2  During the registration process, hsi77 requires all prospective Members to confirm that they are at least 21 years of age and to submit a valid government-issued identity document (such as an Indonesian KTP or passport) confirming their date of birth. Accounts that cannot be verified as belonging to an adult aged 21 or older will be suspended pending verification and permanently closed if verification fails.

12.3  If hsi77 becomes aware that personal data has been collected from a person under the age of 21 — whether through a fraudulent registration or otherwise — hsi77 will immediately suspend the relevant account, delete all associated personal data to the extent permitted by law, and refund any deposited funds to the source payment method after completing required AML checks.

12.4  If you believe that a minor may have registered or used the Platform, please notify hsi77 immediately at [email protected] so that appropriate action can be taken without delay.

13.1  hsi77 may send you promotional communications about bonuses, new game launches, seasonal promotions (including those tied to Indonesian cultural events such as Idul Fitri, Ramadhan, and Independence Day), and other hsi77 offers — but only where you have explicitly opted in to receive such communications.

13.2  Marketing communications may be delivered via email and/or push notification to your registered contact details. hsi77 will never send unsolicited SMS marketing without your prior consent.

13.3  You may withdraw your marketing consent and opt out of all promotional communications at any time by:

• Clicking the "Unsubscribe" link included in the footer of every marketing email hsi77 sends;
• Adjusting your notification preferences in the "Notifications" section of your hsi77 Account Settings; or
• Sending a written request to [email protected] with the subject line "Marketing Opt-Out".

13.4  Opting out of marketing communications does not affect your receipt of service-critical transactional messages — such as deposit confirmations, withdrawal notifications, KYC status updates, and security alerts — which hsi77 is required to send as part of its contractual obligations to you.

13.5  hsi77 does not engage in targeted advertising using your personal data on third-party platforms or social media networks.

14.1  hsi77 reviews this Privacy Policy on a regular basis and reserves the right to update or amend it at any time to reflect changes in our data-processing practices, applicable law, regulatory guidance, or Platform functionality.

14.2  When material changes are made to this Policy, hsi77 will notify active Members by email to their registered address and/or by displaying a prominent notice on the Platform no fewer than 14 days before the updated Policy takes effect. The "Effective Date" at the top of this Policy will be updated accordingly.

14.3  For non-material changes — such as corrections of typographical errors, clarifications that do not alter the substance of the Policy, or changes required immediately by law — hsi77 may update the Policy without advance notice, though the Effective Date will be revised.

14.4  Your continued use of the Platform after the effective date of a revised Privacy Policy constitutes your acknowledgement of and agreement to the updated Policy. If you do not agree with any revision, you must cease using the Platform and may request account closure by contacting [email protected].

14.5  Previous versions of this Privacy Policy are available upon written request to [email protected].

15.1  If you have any questions, concerns, or requests relating to this Privacy Policy or hsi77's handling of your personal data, please contact us using the details below. hsi77 is committed to addressing all privacy-related enquiries promptly and professionally.

15.2  For general platform support — including account, deposit, withdrawal, and game-related queries — hsi77's customer support team is available 24/7 via live chat on the Platform and via email at [email protected]. Our support agents are native Indonesian speakers able to assist you in English or Bahasa Indonesia.

15.3  This Privacy Policy was last reviewed and updated on 1 January 2026. The current version is Version 2.4.